ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode
Product

KissFFT

1 mentions in 7 days · 1 in 30 days · 1 total · first seen · last

Search everything

Timeline

USN-8745-1: KissFFT vulnerabilities

Ubuntu released USN-8745-1 fixing two KissFFT flaws that could cause denial of service or arbitrary code execution.

Ubuntu security notice USN-8745-1 fixes CVE-2025-34297, where large Fourier transform sizes on 32-bit architectures are mishandled, and CVE-2026-41445, involving multidimensional Fourier transform sizes. Either issue could crash KissFFT, resulting in denial of service or arbitrary code execution. Users should apply the updated packages.

Ubuntu Security Noticesupdated · 4d agofirst · 5d agoAdvisory 13 sourcesCVE-2025-34297CVE-2026-41445

Related CVEs

  • CVE-2026-414458.7<1%
    KissFFT before commit 8a8e66e contains an integer overflow vulnerability in the kiss_fftndr_alloc() function in kiss_fftndr.c where the allocation size calculat
    KissFFT before commit 8a8e66e contains an integer overflow vulnerability in the kiss_fftndr_alloc() function in kiss_fftndr.c where the allocation size calculation dimOther*(dimReal+2)*sizeof(kiss_fft_scalar) overflows signed 32-bit integer arithmetic before being widened to size_t, causing malloc() to allocate an undersized buffer. Attackers can trigger heap buffer overflow by providing crafted dimensions that cause the multiplication to exceed INT_MAX, allowing writes beyond the allocated buffer region when kiss_fftndr() processes the data.
    —
  • CVE-2025-342978.6<1%
    KissFFT versions prior to the fix commit 1b083165 contain an integer overflow in kiss_fft_alloc() in kiss_fft.c on platforms where size_t is 32-bit.
    KissFFT versions prior to the fix commit 1b083165 contain an integer overflow in kiss_fft_alloc() in kiss_fft.c on platforms where size_t is 32-bit. The nfft parameter is not validated before being used in a size calculation (sizeof(kiss_fft_cpx) * (nfft - 1)), which can wrap to a small value when nfft is large. As a result, malloc() allocates an undersized buffer and the subsequent twiddle-factor initialization loop writes nfft elements, causing a heap buffer overflow. This vulnerability only affects 32-bit architectures.
    —

Appears with

organization Canonical 1vendor Canonical 1vendor Ubuntu 1
Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.